08open source
Kushim Web
Compliance / RegTech platform. NestJS + Next.js 15 + PostgreSQL + Redis + Docker + AWS. Audit trails, role-based access, document workflows.
Open the repo
Kushim Web is a compliance / regulatory workflow platform: a regulated business uploads documents, assigns reviewers, runs approval workflows, and gets a tamper-evident audit trail at the end. The frontend is Next.js 15; the backend is NestJS on PostgreSQL with Redis for the workflow queue; deployment is containerised on AWS (ECS behind an ALB, with RDS and ElastiCache managed services).
The audit trail is the part that mattered. Every state transition on a document writes two rows: the new state, and a hash chain entry that binds the transition to the previous hash. A reviewer can verify at any point that no entry was edited or removed, because the chain breaks if any record is tampered with. The chain is exposed as a JSON dump endpoint so external auditors can pull it directly without going through the app.
The workflow engine is generic — any document type
can be modelled as states + transitions + roles —
so new compliance regimes ship as data, not code.